Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2377CAE8DA5411EFADCBE771762E951A.roa
File: 2377CAE8DA5411EFADCBE771762E951A.roa (raw, json)
Hash identifier: KF6ndekZXaXJa6AlHH50IJyN1Fm4hu9fcUjs3V1HPvU=
Subject key identifier: F9:C0:72:C4:2B:3D:C1:82:E7:B8:87:19:E3:34:D8:6A:D3:FD:54:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2377CAE8DA5411EFADCBE771762E951A.roa
Signing time: Fri 24 Jan 2025 13:07:18 +0000
ROA not before: Fri 24 Jan 2025 13:07:14 +0000
ROA not after: Wed 26 Feb 2025 13:07:14 +0000
asID: 59187
IP address blocks: 156.238.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69484 (0x10f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 13:07:14 2025 GMT
Not After : Feb 26 13:07:14 2025 GMT
Subject: CN=67939086-a0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:7a:a2:ca:e1:9b:3c:20:04:f8:19:c1:e9:
f2:18:cf:3e:4a:e6:b4:f9:0b:63:c3:85:ba:f9:1e:
bb:15:48:ae:02:41:7b:87:61:65:d7:0f:fb:8d:08:
5f:a8:95:57:a5:2e:18:52:b7:13:55:2a:f4:cf:de:
28:1e:42:fd:e3:7b:fe:d2:97:35:01:e0:b4:07:9d:
54:4a:be:cd:2e:d3:39:8d:4c:2e:1a:22:ec:c2:16:
45:47:81:8d:18:f5:e5:cd:46:15:40:04:72:10:65:
8d:49:6f:84:25:c1:97:ba:a1:97:a8:68:87:ae:68:
e1:67:74:77:cf:70:6e:a3:80:b7:19:f2:46:3c:e6:
bf:3f:69:a7:f9:77:1c:ae:00:cf:8b:25:63:b8:08:
f1:4e:69:4b:76:8a:93:ad:2b:f3:ac:5e:f4:a9:93:
39:d1:54:bc:fc:e0:fa:e1:61:8a:45:cf:af:65:8d:
4d:6c:a0:72:de:3b:85:e0:0b:f2:02:34:e5:c0:e8:
ec:9f:6f:fa:ba:83:80:15:f9:62:82:32:02:49:d6:
19:10:67:db:84:4b:04:77:4e:ed:58:be:41:d8:11:
1a:bd:83:06:83:b0:35:4f:1c:a9:46:f0:25:2b:6a:
3e:b8:db:e1:c0:99:04:f1:dd:1e:82:0a:81:45:34:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:72:C4:2B:3D:C1:82:E7:B8:87:19:E3:34:D8:6A:D3:FD:54:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2377CAE8DA5411EFADCBE771762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.98.0/24
Signature Algorithm: sha256WithRSAEncryption
af:08:88:0d:2a:04:ec:b7:d5:c1:bb:d3:4a:27:25:3c:92:3e:
eb:f0:a4:df:7e:e4:63:82:9a:5f:a1:e6:46:d8:ad:48:49:e0:
3d:7d:a8:bb:a1:31:f7:32:c4:6f:8a:46:ae:b2:66:ea:0a:cb:
3d:34:72:9b:f0:a2:d9:00:1c:bb:a0:49:d0:b2:55:e7:e0:1d:
39:45:18:c7:39:e5:44:b6:17:d7:74:9f:a5:1b:06:a0:74:c1:
9d:f3:b2:b7:56:05:77:73:46:85:60:a2:b0:d9:89:69:89:25:
4b:d0:e9:b2:9d:9a:3e:5b:ef:0e:b4:2e:7b:61:53:01:20:5c:
2b:f7:23:cc:1c:ea:30:32:74:75:56:42:70:5a:c0:aa:0b:87:
50:c4:29:26:1b:37:18:f3:f7:a7:c4:3f:10:a7:e3:3f:1a:e0:
53:ad:64:76:1d:33:83:7d:b5:86:60:85:f2:6b:d3:2b:26:e8:
89:74:ab:9a:f3:26:f9:20:0a:65:99:ce:66:81:37:d5:ac:08:
9b:21:8c:4b:c2:4d:bd:81:53:94:db:e2:23:cf:3e:c7:6c:78:
d2:97:1c:ff:fb:b6:0c:78:8b:af:da:31:2e:ad:e6:2f:aa:2a:
ef:39:f1:1b:2f:8c:90:ea:48:7e:ca:cb:60:f3:0b:09:4d:e8:
2e:ff:96:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:42 2025 by rpki-client